Regularly updating a secret for the github actions, is tedious, and means that CI will fail without warning. The presence of the secret is not documented.